Commit Graph

1959 Commits (f0e1a27b7dca2e6d36f904ef52d4976649ccefa3)

Author SHA1 Message Date
iglocska 589e4c3529 fix: fixed some permission issues preventing non site admins from using some functionalities correctly 2017-02-17 10:40:59 +01:00
iglocska fde867d7a8 fix: ACL updated 2017-02-17 10:05:05 +01:00
iglocska b02c76f544 fix: Fixed an annoying effect when adding a sighting
- also, js file renamed to current version
2017-02-17 09:10:51 +01:00
iglocska 956758aca5 fix: Some bug fixes 2017-02-17 00:52:56 +01:00
iglocska dc8a9707c0 Merge branch '2.4' into feature/enhanced_sightings 2017-02-16 22:52:53 +01:00
iglocska 94c01d5896 new: First revision of the new sightings system 2017-02-16 22:46:30 +01:00
Adrien RAFFIN 3507e15ebf fix: update default field of organisation when creating new accounts 2017-02-16 10:44:43 +01:00
iglocska e1f5463a82 fix: Added correct recognition of ip:port indicators to the freetext import tool, fixes #1919 2017-02-10 17:59:35 +01:00
Raphaël Vinot 8b44ee6849 Update PyMISP 2017-02-09 16:53:30 +01:00
iglocska 21f4f83d17 fix: API request : "An Internal Error Has Occurred." if no Thread for an event fixes #1900
- also, some cleanup of the eventView api
2017-02-09 06:37:22 +01:00
iglocska d6654b258e new: lookup organisations by uuid using organisations/view 2017-02-06 18:14:22 +01:00
iglocska cbe759f3c2 chg: Work on the sightings 2017-02-06 14:08:55 +01:00
iglocska 4e41b55572 new: First iteration of the improved sightings 2017-02-05 23:48:18 +01:00
iglocska 48438c704a new: Added mass tagging to attributes on the event view
- Oooh yes.
2017-02-03 16:40:05 +01:00
Christophe Vandeplas 619bfc12c7 attributes/text - optionally export attributes from not published events 2017-02-03 12:21:11 +01:00
iglocska 61464e5385 new: New setting to sanitise attributes on delete
- if enabled server wide, any delete of an attribute will not just set the deleted flag, but also sanitise the content fields
- fields sanitised: category, type, value, comment, to_ids
2017-02-02 13:38:05 +01:00
iglocska b6ce529f3a new: Send out credentials directly during user creation 2017-02-02 11:11:51 +01:00
iglocska 7db510832a new: Added API access to the statistics
- first iteration, this is a bit more complex to get it right than this implementation
- data cleanup to make the results somewhat more useful
- raw data needs to be documented

- available APIs:
  - /users/statistics/data.json
  - /users/statistics/orgs.json
  - /users/statistics/tags.json
  - /users/statistics/attributehistogram.json
2017-02-01 23:42:26 +01:00
iglocska ee80ecfce7 new: small rework of the thread functionalities
- API get /threads/view/<thread_id> and /threads/viewEvent/<event_id>
- Added new setting to show post count on the event index including a notification if it has a post newer than 24 hours
2017-02-01 15:32:22 +01:00
iglocska 1f9a631182 fix: Added missing view file, some small fixes, pymisp version bump 2017-01-31 10:54:33 +01:00
iglocska de1b3cf4c8 fix: Added new functionality to the ACL 2017-01-31 10:52:32 +01:00
iglocska ad472e8c4b fix: Removing tags now spans its own CSRF tokens in the confirmation popup
- fixes some CSRF issues
- improves rendering performance
2017-01-31 09:58:21 +01:00
iglocska 48843b60ec fix: Fix and cleanup script for a specific bug
- rare occurance, but some MISP servers enter an upgrade loop causing massive amounts of log entries
- this patch cleans up the bug preventing further upgrade loops as well as offers a script to clean up the fallout
2017-01-30 09:16:43 +01:00
iglocska 76c0cb4e52 new: Add and remove tags from object by uuid
- /tags/attachTagToObject/uuid/tag
- /tags/removeTagFromObject/uuid/tag

- tag can be tag ID or tag name (must be an exact match)
- Affects events and attributes
2017-01-27 19:05:43 +01:00
iglocska 8205bc9294 fix: removed malware-sample and attachment from the attribute type options
- should not be possible to select these via the add/edit attribute functions
2017-01-27 17:24:41 +01:00
iglocska c3ef68ea19 fix: PyMISP version bump 2017-01-26 09:44:48 +01:00
iglocska d212266984 fix: Fixed an issue that prevented a feed to be convertable between types 2017-01-25 05:59:22 +01:00
iglocska b2f008d5ce new: Added the option to delete files after ingestion of local feed 2017-01-25 05:53:04 +01:00
iglocska aba2491344 new: Local feeds
- still needs testing
2017-01-24 14:07:55 +01:00
iglocska 8c63e6f3d5 new: Added two new parameters for the attribute restsearch
- to_ids, with the following options
  - false (default): include all attributes, no matter the to_ids flag
  - true: include only to_ids attributes
  - "exclude": exclude attributes marked to_ids

- deleted with the following options
  - false (default): only include non deleted attributes
  - true: include deleted attributes
  - "only": ONLY include deleted attributes
2017-01-23 12:44:18 +01:00
Iglocska a290e4254d fix: Fixed the org edit API
- it only worked if all fields were set
- switched to a different strategy where any changed field is updated
2017-01-22 17:35:35 +01:00
Iglocska e8303537e7 fix: Organisation UI and API improvements
- opened up the organisations controller to API actions
  - this includes index/add/edit/delete
  - uses the still new-ish standardised REST library
  - send GET requests to add/edit to view the parameters

- reworked the org index to paginate 60 items instead of 20 and to have a view all button
2017-01-20 10:33:38 +01:00
Iglocska d39a4857b7 fix: Just force utf8 encoding if it's not set 2017-01-19 17:17:34 +01:00
Iglocska ffd087ba38 fix: Added a warning if utf8 encoding isn't set up in the database config
- also, changed the default database config to enforce utf8
2017-01-19 16:40:23 +01:00
Iglocska e5d658078a fix: ACL updated for attribute level tagging 2017-01-18 16:45:00 +01:00
Iglocska 2a13bf24a3 fix: Temporary fix for no relatedattributes producing an empty string instead of an empty array in the retrieved data 2017-01-18 11:24:17 +01:00
Iglocska 0960791008 Merge branch '2.4' into feature/attribute-tagging 2017-01-17 14:52:59 +01:00
Iglocska 770b69dbc2 fix: Fix a unicode issue with the correlation graphs 2017-01-17 14:50:39 +01:00
Iglocska 0f7d37ce04 fix: Fix an issue with the graphs when no relations are found 2017-01-17 14:22:25 +01:00
Iglocska 5eeb1c85a9 chg: Use cakeresponse for JSON response in updateGraph instead of serialize 2017-01-17 14:06:23 +01:00
Iglocska fbcb7480a0 chg: Update of the JS filename 2017-01-17 13:54:51 +01:00
Iglocska 9a96c1875c fix: Update the attribute timestamp on attaching/removing tags 2017-01-17 10:50:08 +01:00
Iglocska 6fa8c456c0 fix: Unpublish event when adding/removing an attribute tag
- also show the event being unpublished immediately
2017-01-17 10:37:10 +01:00
iglocska f44279ef9b fix: Fixed some issues with the addTag/removeTag APIs 2017-01-16 23:24:43 +01:00
iglocska 4ad022b03c Merge branch '2.4' into feature/attribute-tagging 2017-01-16 16:15:06 +01:00
iglocska a5663dfc07 fix: Fixed the editing of tags using the rest API 2017-01-16 16:05:19 +01:00
Iglocska be4d8ed54f chg: Allow disabling/enabling publishing of events imported via the UI, fixes #1845 2017-01-16 11:02:23 +01:00
Iglocska 2dee1414b0 fix: disable_correlation not updated using the events/edit api 2017-01-16 10:47:22 +01:00
Iglocska d537fa4447 fix: Edit events by uuid instead of id, fixes #1842 2017-01-15 09:05:17 +01:00
Iglocska c3225e0679 fix: Only allow malware-samples to be created using the upload_sample api, fixes #1843
- contrary to the documentation, setting the IDS flag decided the type of the resulting upload (malware-sample vs attachment)
- attachments can easily be created without any black magic using the add attribute api anyway

- also fixed a bug that prevented the timestamp of events receiving a sample via the upload_sample api from being re-timestamped
2017-01-15 08:56:02 +01:00